Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft
File:                     8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft (raw, json)
Hash identifier:          H2YlwjHIx5ziSXfvkwvTTLGJQE3wGq5GYYFNBGo5kWA=
Subject key identifier:   4E:0D:4F:3B:8A:56:33:B5:61:34:C8:E9:4B:FB:4B:33:7F:65:3C:91
Authority key identifier: F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67
Certificate issuer:       /CN=A912FBD5/serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167
Certificate serial:       06E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft
Manifest number:          06DE
Signing time:             Tue 24 Mar 2026 21:52:48 +0000
Manifest this update:     Tue 24 Mar 2026 21:52:47 +0000
Manifest next update:     Tue 31 Mar 2026 21:52:47 +0000
Files and hashes:         1: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl (hash: yKVr4PD9N9/ryG0WrTqZDDFopAe0tEL+fELML1YFgX8=)
                          2: C0D6C00E8E5511EBA9EA9977C4F9AE02.roa (hash: RFr+wY8YjBbEu1OwArA3TAYM2l70BtpGvPxcKHML3E0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl
                          rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1766 (0x6e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FBD5, serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167
        Validity
            Not Before: Mar 24 21:52:47 2026 GMT
            Not After : Mar 31 21:52:47 2026 GMT
        Subject: CN=69c307b0-426d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:83:66:d1:3f:cd:5a:74:75:5f:e5:4c:f2:c3:
                    67:2c:75:23:00:72:82:f4:06:b1:fa:69:31:50:49:
                    1f:cf:70:9c:cf:1e:e1:77:0e:01:c1:fc:65:b0:43:
                    c9:82:13:15:55:a5:18:be:1e:d7:81:e7:3d:01:35:
                    72:20:7e:f9:5c:f9:e4:6a:1c:2c:71:d9:db:8d:9e:
                    05:28:fb:ac:7c:e2:b9:14:7d:96:18:3e:bd:6d:8a:
                    7b:23:32:16:b5:79:e5:0f:5e:c3:78:7d:ca:0e:bd:
                    d5:1a:4d:5f:2d:a9:82:72:8e:c3:c6:26:6a:3a:ca:
                    80:bd:ad:d8:16:0d:de:46:bb:67:e6:6b:a3:b5:a5:
                    f9:8a:72:6a:be:f9:9c:c6:d5:d8:05:0c:67:b4:8f:
                    a7:17:37:86:11:c0:05:3c:4f:13:b1:a5:42:64:a1:
                    46:c1:3d:39:cb:f8:7b:d6:0d:f8:b1:00:b8:46:56:
                    fe:7b:87:73:0e:3c:b9:90:cd:16:91:53:9a:a4:16:
                    2c:ef:2d:da:32:fe:92:2b:35:f3:08:79:2e:00:a0:
                    0b:7a:a8:55:1b:88:14:df:ea:b1:aa:3a:86:d6:63:
                    62:06:7d:48:82:ec:eb:f8:82:fb:d8:84:06:87:45:
                    20:6b:8f:23:6f:02:aa:7f:fc:74:41:33:ef:2f:bf:
                    48:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0D:4F:3B:8A:56:33:B5:61:34:C8:E9:4B:FB:4B:33:7F:65:3C:91
            X509v3 Authority Key Identifier:
                keyid:F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9b:2d:5d:f8:9b:46:1d:e1:bc:f8:a1:cb:53:b6:56:16:8b:
         7c:d8:f4:04:7c:60:14:dc:7b:0d:3d:28:42:ae:6a:5e:4c:c9:
         b9:f1:b6:e0:e9:0a:51:87:31:a3:24:51:3d:49:dd:83:98:75:
         bc:5b:bc:ce:08:e0:29:2c:c3:08:60:b9:17:26:dd:cb:18:fa:
         f5:ab:4f:a6:e8:57:44:c3:eb:a2:ba:35:96:a8:76:f4:1b:aa:
         2a:c0:24:bf:b7:f0:d6:78:4c:9c:a6:b5:0b:3e:cb:59:30:50:
         ff:48:6b:b9:b0:f0:bb:09:71:b8:fd:2d:81:00:21:a7:ed:90:
         97:d8:42:42:09:fe:08:16:1d:46:5d:a4:c7:3e:97:52:ef:7d:
         d2:4c:4f:68:4a:89:ab:13:fd:ab:7d:f1:72:78:c9:2a:eb:c5:
         fb:f1:53:f9:5d:02:fc:66:3f:fc:ab:c6:39:68:b7:a4:01:32:
         9a:64:e0:28:68:c2:03:d5:14:9d:d4:3b:42:52:98:41:43:fd:
         ed:e7:c2:0c:9b:d2:40:50:83:4a:f3:fb:01:65:43:03:79:9c:
         6b:7c:d2:69:4b:bb:5d:97:45:6e:7f:08:e1:8e:ff:e0:36:ef:
         92:ea:a5:a2:5c:7b:af:20:2d:ef:2a:a5:aa:6c:4f:68:e5:0d:
         46:ea:6e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:23 2026 by rpki-client